Newsletter privacy notice · Version newsletter-privacy-v1 · Updated 5 October 2026

This notice describes the FINN-WILSON newsletter service at launch. The automated subscription service is currently being prepared.

Who is responsible

Finn Wilson, operating the FINN-WILSON website and newsletter, is responsible for how your personal information is used. Contact: finn@finn-wilson.com. Postal address: Da Costastraat 135-3R, 1053 ZM Amsterdam, Netherlands.

What we collect

When you subscribe, we collect your email address, your newsletter preferences and evidence of your permission, including the form source, signup time, consent wording version and confirmation time. We also keep subscription status and email delivery, bounce, complaint and unsubscribe records. Our website and email providers may process technical information such as IP addresses and security logs to operate their services.

Why we use it

We use your information to confirm your subscription, send FINN-WILSON insights on property, power and capital, manage your preferences and protect the service from abuse. The newsletter includes a briefing every two weeks, a monthly deep dive and a short welcome series. Newsletter delivery relies on your consent. Necessary security, delivery administration, consent evidence and a minimal do-not-email record rely on our legitimate interests in operating the service and respecting your choices.

Your choice

Providing your email address is optional, but we need it to deliver the newsletter. We ask you to confirm your email address before sending the welcome series or regular newsletter. You can withdraw your permission using the unsubscribe link in a newsletter or by emailing us. Withdrawal does not affect the lawfulness of processing before you withdrew permission. Booking a conversation does not subscribe you.

Who processes the information

We use Webflow for the website and signup forms, Attio for contact and consent records, and Resend for email delivery and subscriber management. These providers process information for us under data-processing agreements and use their own service providers. Access is limited to people and providers who need it to operate the service. We may also disclose information where legally required.

International processing

Some providers and their service providers process information outside the European Economic Area, including in the United States. Resend stores customer data in the United States; selecting a European email-sending region does not change that storage location. Applicable safeguards include EU Standard Contractual Clauses and, where applicable, recognised adequacy decisions. You can contact us for information or copies of the relevant safeguards.

How long we keep it

We keep your active subscription details while you remain subscribed. We review inactive subscriptions after 24 months and remove or seek renewed permission where appropriate. Unconfirmed signup records are removed within 30 days unless needed to investigate abuse; confirmation links expire after 48 hours. Raw website signup submissions are removed within 30 days after successful processing. After an unsubscribe, we remove newsletter-only profile information within 30 days, retaining limited consent evidence for up to three years and a minimal suppression record for as long as we operate the mailing programme, subject to periodic review. Providers may retain security logs and backups for their own documented periods. A separate business enquiry may have its own justified retention period.

Your rights

You can ask to access, correct or erase your information, restrict processing, and receive information you provided in a portable format where the law provides this right. You can object to processing based on legitimate interests and to direct marketing. Contact finn@finn-wilson.com; we normally respond within one month. We may need proportionate information to verify your identity. You may complain to the Dutch Autoriteit Persoonsgegevens at autoriteitpersoonsgegevens.nl or to your local supervisory authority.

Marketing, profiling and AI

Newsletter permission covers the emails described here. We do not sell or rent the subscriber list. Unrelated sales campaigns or partner marketing need a separate assessment and appropriate permission before they begin. At launch, we do not enrich newsletter profiles from external sources or use subscriber information for AI-generated lead scoring or automated decisions with legal or similarly significant effects. AI may help draft editorial content without identifiable subscriber information. Any future profiling, enrichment or personal-data AI use will be assessed and explained before it starts.

Links, cookies and changes

Our pages may link to Calendly, LinkedIn and other services. Those services provide their own privacy information. Non-essential website tracking and email open or click tracking will remain off at newsletter launch unless an appropriate permission mechanism has been implemented. If we change how we use your information, we will update this notice and obtain fresh permission where required.

Contact Finn about your information · Dutch privacy regulator